$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa File: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (raw, json) Hash identifier: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo= Subject key identifier: 91:A8:55:D9:34:08:60:A4:CD:5A:59:3A:7B:79:72:74:4C:14:0D:43 Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 7AAA44417324BB924A63B6F2B7DB201FEE96DA07 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa Signing time: Fri 27 Jun 2025 08:03:14 +0000 ROA not before: Fri 27 Jun 2025 07:58:14 +0000 ROA not after: Fri 26 Jun 2026 08:03:14 +0000 asID: 137286 IP address blocks: 49.128.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:aa:44:41:73:24:bb:92:4a:63:b6:f2:b7:db:20:1f:ee:96:da:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Jun 27 07:58:14 2025 GMT Not After : Jun 26 08:03:14 2026 GMT Subject: CN=91A855D9340860A4CD5A593A7B7972744C140D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:f4:b0:31:cf:f8:1e:aa:13:b0:11:fc:31: 88:95:9d:6d:01:7d:9f:93:99:84:22:da:9f:df:99: 19:b7:2f:5b:27:c6:33:f0:cd:7e:6e:39:40:e6:43: 9e:c0:4c:37:c4:ee:3d:a9:66:34:f0:01:28:1a:ec: 1c:e2:0b:e0:56:e6:3b:83:c5:0b:12:b0:62:ef:88: 2d:44:fa:ea:9a:57:9e:9c:fb:d6:7e:d3:67:89:af: 55:ff:8f:79:7f:44:ed:23:e5:b3:ec:cf:df:63:09: c6:a2:45:d4:e6:ab:b1:d7:09:fd:bb:1a:9b:a5:c8: 0e:77:cd:5f:4c:d2:87:7b:92:90:d0:9f:6a:75:59: 7a:0b:a2:18:ac:f8:95:9e:91:29:a5:73:70:64:79: 29:fe:71:f2:51:80:d9:1b:b4:07:8b:ac:f9:b3:b1: 9c:5c:6b:ca:9d:f7:9a:5f:02:9e:05:d1:f7:e4:ef: a2:60:f2:2e:db:c8:8c:10:b3:75:a4:09:16:62:b2: 5c:ff:9e:61:54:37:f2:40:eb:0f:ce:99:91:06:65: a4:77:34:af:74:da:79:dc:59:b8:10:3e:47:8c:76: 41:69:ca:98:03:cf:1a:a1:70:9e:e1:83:25:5b:45: c2:e5:08:9d:21:12:98:1c:06:6d:ab:cb:f2:97:43: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A8:55:D9:34:08:60:A4:CD:5A:59:3A:7B:79:72:74:4C:14:0D:43 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.188.0/22 Signature Algorithm: sha256WithRSAEncryption ad:21:a4:5f:22:36:5c:0b:85:2f:df:54:17:82:d4:23:9d:f2: 42:01:17:c4:25:d8:58:09:70:87:44:f6:c0:9d:4b:a8:9b:7f: a5:51:73:2d:86:6c:b2:86:9b:42:fc:6d:97:ba:08:64:29:da: e3:96:39:61:4f:c6:3c:d5:5f:ef:69:bc:6a:bf:f7:aa:99:f0: 17:20:8d:ba:ac:0f:3e:f4:d4:64:79:9c:c7:83:e7:88:56:09: 67:03:27:1e:b9:05:3b:15:ac:2d:d0:b9:fd:9e:77:ff:54:09: 7e:89:db:90:4d:1b:11:7b:9b:e2:e8:ab:47:22:92:e4:13:9d: a8:88:40:6f:c0:74:76:e5:30:5f:fe:59:f2:f9:14:52:52:cb: 0e:73:bd:1f:b1:54:e2:67:e3:f5:70:35:47:5c:c3:80:04:a1: 6a:a9:c2:d5:9f:62:07:7e:4b:0f:5b:67:95:b9:68:d7:f2:31: 55:0b:46:c4:44:9d:16:fd:46:90:20:1b:73:89:91:50:e9:2c: 0f:64:d6:c8:45:95:08:c7:ef:ea:ba:c4:a4:aa:0a:23:33:30: 13:b6:d5:eb:e7:ed:cf:47:53:25:df:3c:83:bc:a4:87:65:01: 3c:67:de:ec:74:b7:d4:37:42:85:62:54:c7:04:a6:e4:8f:b2: 5b:19:2e:04 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeqpEQXMku5JKY7byt9sgH+6W2gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTA2MjcwNzU4MTRaFw0yNjA2MjYwODAzMTRaMDMxMTAvBgNV BAMTKDkxQTg1NUQ5MzQwODYwQTRDRDVBNTkzQTdCNzk3Mjc0NEMxNDBENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkx/SwMc/4HqoTsBH8MYiVnW0B fZ+TmYQi2p/fmRm3L1snxjPwzX5uOUDmQ57ATDfE7j2pZjTwASga7BziC+BW5juD xQsSsGLviC1E+uqaV56c+9Z+02eJr1X/j3l/RO0j5bPsz99jCcaiRdTmq7HXCf27 GpulyA53zV9M0od7kpDQn2p1WXoLohis+JWekSmlc3BkeSn+cfJRgNkbtAeLrPmz sZxca8qd95pfAp4F0ffk76Jg8i7byIwQs3WkCRZislz/nmFUN/JA6w/OmZEGZaR3 NK902nncWbgQPkeMdkFpypgDzxqhcJ7hgyVbRcLlCJ0hEpgcBm2ry/KXQzuVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkahV2TQIYKTNWlk6e3lydEwUDUMwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0MDJkYWE1LWZiMGMtNGEyNC05 ODg5LTMzYmQ1MGRiNGZlMC8wLzM0MzkyZTMxMzIzODJlMzEzODM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM3MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMYC8MA0GCSqG SIb3DQEBCwUAA4IBAQCtIaRfIjZcC4Uv31QXgtQjnfJCARfEJdhYCXCHRPbAnUuo m3+lUXMthmyyhptC/G2XughkKdrjljlhT8Y81V/vabxqv/eqmfAXII26rA8+9NRk eZzHg+eIVglnAyceuQU7Fawt0Ln9nnf/VAl+iduQTRsRe5vi6KtHIpLkE52oiEBv wHR25TBf/lny+RRSUssOc70fsVTiZ+P1cDVHXMOABKFqqcLVn2IHfksPW2eVuWjX 8jFVC0bERJ0W/UaQIBtziZFQ6SwPZNbIRZUIx+/qusSkqgojMzATttXr5+3PR1Ml 3zyDvKSHZQE8Z97sdLfUN0KFYlTHBKbkj7JbGS4E -----END CERTIFICATE-----Generated at Thu Jul 3 09:59:30 2025 by rpki-client